Possible infection found on GBPVR site?

[pcostanza]

[tvshowman]

Since we have no idea the intention of the abuser we have to assume it is to install adware and an ad-server and more harmful would be to steal credit card and password info which to me signals the cumbersome "Format + install XP and SP3 and all my drivers office software VPN network and programs to help me through each work day...

I wonder why one of my systems that uses Adobe Reader and FF didn't pick this up though I use Bitdefender for my virus protection.
From what I've read, bloodhound is a low threat and easily removed. I don't blame you for nuking the system just to be sure.
Since I work with lots of pdf files that need manipulating, I've switched to Nitro PDF. It's not free but is small, fast and works much better for me than Adobe Pro and it's very much cheaper.

Paul

[suddste]

Sorry sub

[4zm4r3d02]

...This infection proves that even using Firefox 2.0 and even 3.0 that you are still vulnerable at any website you visit good or bad

Out of curiosity, I looked at the GB-PVR home page with FF 3.0.3 when the infection was reported, and the NoScript addon apparently prevented it from downloading to my machine. It can be annoying, as it defaults to blocking all scripts on all sites, but you can easily add sites to its whitelist. Even though I have gbpvr.com in the whitelist, it prevented the SUDATRAFF.INFO script from running.

[mkenyon2]

It seems you've tracked it down, but I too got a funny PDF warning yesterday, AFTER you had taken down the site.

I'd help with the site front page too, if I can. Couldn't do it all, but perhaps I could through a few lines in.
.Net or PHP? This is a project worth fighting for.

[tvshowman]

I am on a new install of windows now and it was painless thanks to nlite disc I mde a while ago that I made for my system to make it unattended

For me when I searched for how to clean the bloodhound all I found was refers to symentic and when I did a system scan it found nothing. If it finds nothing it means it cleaned nothing so where did the bloodhound go on my system? Also the bloodhound to my knowledge is used to open up your computer so it will accept another nasty payload uploaded automatically by the author.

From past experience I can tell you that there are nasty trojans that cannot be cleaned from a system if the antivirus cannot detect it in memory. The abuser would be able to view my desktop in realtime as well as access to all my files and system folders webcam soundcard etc...

That is the number one reason I needed to format and start fresh. All is good now.

If you have been infected there are a number of tools you can use to see.

Trend Micro HijackThis 2.0.2

superantispyware

Trojanhunter

Norton Antivirus

I am happy to say that I feel the number of infections for the site was minimal as I believe we all caught wind of it in less than 10 minutes of it hitting the homepage. I had been on and off the website all day.

With subs quick actions the infections were stopped ASAP.

Cheers!

[whurlston]

I'd help with the site front page too, if I can. Couldn't do it all, but perhaps I could through a few lines in.
.Net or PHP? This is a project worth fighting for.

I was planning PHP. I'm having some graphics and the layout design made today. I'd be glad to accept help on the text. I'll let you know as soon as I get the proof pages up.

[sub]

Great. Let me know how you get on.

[wrocky]

Might this be a good time to shake the can and ask for contributions? My yearly donation is coming up so I just sent you an early $25 (better spend it fast before the new president takes it from me!)
...

Good reminder. However, I should have done it when the CDN dollar was worth more than the american dollar back in the July, and sub would have had more funds We're back down around 83 cents to american dollar now.

Wrocky

[liteswap]

Have just sent a contribution - keep it up sub! Thanks for all you've done....

[grits]

I just got back to this thread after the weekend, so to answer sub's very old question, Symantec anti-virus picked up the virus on my machine.